Cloud Security Engineer, VP

Overview of the Role

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Cloud Security Engineer is a senior management level position responsible for accomplishing results through the management of a team or department in an effort to drive a variety of engineering activities including the design, acquisition and deployment of hardware, software and network infrastructure in coordination with the Technology team. The overall objective of this role is to lead efforts to ensure quality standards are being met within existing and planned framework.

Responsibilities:

• Evaluate existing security configurations and provide actionable recommendations to maintain a highly secure cloud environment.

• Ensure all proposed solutions are enterprise ready, highly secure, automated, and scalable.

• Design and implement cloud native network security controls.

• Certify, integrate, and deploy new products and services for secure use at Citi.

• Serve as a technology subject matter expert for internal and external stakeholders and provide direction for all firm mandated controls and compliance initiatives.

• Adapt quickly to changing threat landscapes and business requirements.

​

Critical Competencies:

• Proficient in Google Cloud and Azure native networking and security services.

• Experience with CI/CD and Infrastructure as Code (IaC) deployment using Terraform.

• Knowledge of container security and orchestration tools such as Kubernetes.

• CI/CD & IaC:

  • Must-Have: Extensive experience with CI/CD methodologies and tools.

  • Must-Have: Proficiency in Infrastructure as Code (IaC) deployment using Terraform.

• Logging & Monitoring:

  • Demonstrated experience configuring and managing logging and monitoring systems in cloud (AWS, GCP) and hybrid environments.

  • Familiarity with various monitoring tools and practices for performance and security.

• Cloud Networking:

  • Expert-level understanding of AWS and GCP cloud-native networking services

  • Proven ability to implement network segmentation strategies effectively using these services.

• Security & Compliance:

  • Expert-level knowledge of security logging and monitoring principles and tools.

  • Experience with Splunk is a significant plus.

  • Understanding of cloud security best practices and compliance frameworks.

• Software Engineering:

  • Hands-on experience developing and engineering software solutions and services, preferably with a focus on cloud-native applications.

  • Must-Have: Proficiency in Python, Golang, AWS/GCP SDKs

  • Experience writing automation for tasks in Cloud

• Cloud Certifications:

  • Relevant certifications in AWS and GCP

​

Qualifications:

• 5+ years of relevant experience as a security engineer for Google Cloud and/or Azure.

• Expert level understanding of Google Cloud and Azure native networking and security services.

• Experience in DevOps and agile methodologies and automated solution delivery and testing through CI/CD pipelines.

  • Hands on experience developing and engineering software solutions and services.

  • Consistently demonstrates clear and concise written and verbal communication.

  • Ability to work in a cross-functional environment and partner with virtual teams.

  • Ability to work independently, multi-task, and take ownership of various parts of a project or initiative.

Education:

• Bachelor's degree in computer related field or equivalent work experience

• Google Cloud/Microsoft Azure Security Engineer or other relevant Cloud security certifications